Skip to main content
U.S. flag
An official website of the United States government
Dot gov
The .gov means it’s official. 
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.
Https
The site is secure. 
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

WASHINGTON – The Federal Deposit Insurance Corporation (FDIC), along with the Office of the Comptroller of the Currency and the Board of Governors of the Federal Reserve System, today issued revised model risk management guidance.

The revised guidance clarifies that model risk management should be tailored commensurately to the size, complexity, and model risk profile of a banking organization. To support banking organizations’ model risk management practices, the revised guidance highlights sound principles for effective model risk management—in particular, by discussing the factors that influence model risk and the features of effective model development and model use; model validation and monitoring; and governance and controls. The revised guidance also discusses considerations specific to vendor and other third-party products, including validation of these products. The guidance does not set forth enforceable standards or prescriptive requirements, and non-compliance will not result in supervisory criticism.

In connection with the release of this guidance, the FDIC is rescinding FIL-22-2017, Adoption of Supervisory Guidance on Model Risk Management, and FIL-27-2021, Bank Secrecy Act: Agencies Address Model Risk Management for Bank Models and Systems Supporting Bank Secrecy Act/Anti-Money Laundering and Office of Foreign Assets Control Compliance.

Last Updated: April 17, 2026